Konduit Capacity Inc. ("Konduit", "we", "us", or "our") is committed to protecting your information. This Privacy Policy explains how we collect, use, disclose, and safeguard data when you use our platform at exchange.konduitcapacity.com and our website at www.konduitcapacity.com (collectively, the "Service").
Because Konduit handles sensitive insurance program data, we treat all user-submitted information with heightened care. This policy describes the specific protections we apply.
We collect information you provide directly to us, including:
We also collect certain information automatically when you use our services, including log data, device information, IP address, browser type, pages visited, and usage patterns. We use cookies and similar technologies to operate the Service and understand usage.
We use the information we collect to:
We use third-party artificial intelligence tools to structure, extract, and analyze information from submitted documents. Currently this includes Anthropic's Claude models. Our AI providers are contractually prohibited from using your data to train their public models. AI processing is limited to what is necessary to provide the Service.
We do not sell your personal information or program data. We share information only as described here:
We retain account and program data for as long as your account is active. After termination, we generally delete or anonymize your data within 90 days, except where longer retention is required for legal compliance, dispute resolution, or enforcement of our agreements.
You may request deletion of your account and data at any time by contacting us at partnerships.konduit@konduitcapacity.com.
We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, role-based access controls, and audit logging. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
If you become aware of a security incident affecting your account, please contact us immediately.
You may have rights regarding your personal information, depending on where you live. These may include the right to:
To exercise these rights, contact us at partnerships.konduit@konduitcapacity.com. We will verify your identity before responding to requests.
If you are a California resident, the California Consumer Privacy Act ("CCPA") gives you specific rights regarding your personal information, including the rights described above. Konduit does not sell personal information as defined by the CCPA. You may exercise your CCPA rights by contacting us at partnerships.konduit@konduitcapacity.com. We will not discriminate against you for exercising these rights.
To the extent Konduit handles nonpublic personal information under the Gramm-Leach-Bliley Act ("GLBA") in connection with insurance program data, we maintain administrative, technical, and physical safeguards consistent with the GLBA Safeguards Rule and do not disclose such information except as described in this Privacy Policy or as permitted by law.
Konduit is a Canadian company operating from Ontario. Our collection, use, and disclosure of personal information is subject to Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"). Under PIPEDA you have the right to access the personal information we hold about you, to challenge its accuracy, and to withdraw consent to further processing (subject to legal and contractual restrictions).
If you have a complaint about our handling of your personal information that we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Konduit operates from Canada. Data is stored and processed in both Canada and the United States, depending on the service provider. Our primary database and file storage (Supabase) and hosting providers (Vercel, Railway) operate data centers in the United States. AI processing via Anthropic occurs in the United States.
By using the Service, you acknowledge that your information may be transferred to, stored in, and processed in countries other than your own, including Canada and the United States. Data stored in or transferred to the United States may be subject to US law, including lawful access requests by US government authorities. We apply contractual and technical safeguards to maintain comparable protection wherever your data resides.
We use essential cookies to operate the Service (for example, to keep you signed in) and limited analytics cookies to understand usage. You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.
The Service is not directed to anyone under 18, and we do not knowingly collect information from children.
We may update this Privacy Policy from time to time. We will notify you of material changes by email, through the Service, or by posting the new policy here with an updated "last updated" date and version number. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, please contact us at partnerships.konduit@konduitcapacity.com.